Sunday, April 13, 2025
Homecyber securityMeta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal...

Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data

Published on

SIEM as a Service

Follow Us on Google News

Texas Attorney General Ken Paxton has secured a $1.4 billion settlement with Meta Platforms Inc. (formerly known as Facebook) over the unauthorized capture and use of millions of Texans’ personal biometric data.

This settlement marks the largest privacy settlement ever obtained by an Attorney General from a single state and serves as a significant warning to companies engaged in practices that violate privacy rights.

Largest Privacy Settlement in History

The $1.4 billion settlement dwarfs previous records, including a $390 million settlement obtained by 40 states from Google in late 2022.

- Advertisement - Google News

This case is the first lawsuit and settlement under Texas’s “Capture or Use of Biometric Identifier” Act (CUBI), highlighting the state’s commitment to protecting its citizens’ privacy rights.

Attorney General Paxton emphasized the importance of holding major technology companies accountable for violating privacy laws.

“After vigorously pursuing justice for our citizens whose privacy rights were violated by Meta’s use of facial recognition software, I’m proud to announce that we have reached the largest settlement ever obtained from an action brought by a single State,” said Attorney General Paxton.

“This historic settlement demonstrates our commitment to challenging the world’s biggest technology companies and holding them accountable for breaking the law and violating Texans’ privacy rights. Any abuse of Texans’ sensitive data will be met with the full force of the law.”

Meta’s Unauthorized Data Collection

In February 2022, Attorney General Paxton sued Meta for unlawfully capturing the biometric data of millions of Texans without obtaining their informed consent as required by Texas law.

The lawsuit revealed that Meta’s data collection practices violated both the CUBI and Deceptive Trade Practices Act.

How to Build a Security Framework With Limited Resources IT Security Team (PDF) - Free Guide

Meta’s facial recognition software, initially introduced in 2011 as a Tag Suggestions feature, automatically scanned and recorded facial geometry from photographs uploaded to Facebook without users’ knowledge or consent.

The settlement agreement, reached after only two years of litigation, requires Meta to pay the state of Texas $1.4 billion over five years.

Attorney General Paxton credited the aggressive litigation efforts of co-counsel firms Keller Postman and McKool Smith with achieving this historic outcome.

Zina Bash served as Lead Counsel for Keller Postman, while Sam Baxter and Jennifer Truelove led the team from McKool Smith.

This settlement underscores the importance of informed consent in data collection practices and serves as a precedent for future privacy enforcement actions.

Texans can now rest assured that their biometric data will be protected under the full force of the law.

Are you from SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Free Access

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Threat Actors Manipulate Search Results to Lure Users to Malicious Websites

Cybercriminals are increasingly exploiting search engine optimization (SEO) techniques and paid advertisements to manipulate...

Hackers Imitate Google Chrome Install Page on Google Play to Distribute Android Malware

Cybersecurity experts have unearthed an intricate cyber campaign that leverages deceptive websites posing as...

Dangling DNS Attack Allows Hackers to Take Over Organization’s Subdomain

Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains,...

HelloKitty Ransomware Returns, Launching Attacks on Windows, Linux, and ESXi Environments

Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Threat Actors Manipulate Search Results to Lure Users to Malicious Websites

Cybercriminals are increasingly exploiting search engine optimization (SEO) techniques and paid advertisements to manipulate...

Hackers Imitate Google Chrome Install Page on Google Play to Distribute Android Malware

Cybersecurity experts have unearthed an intricate cyber campaign that leverages deceptive websites posing as...

Dangling DNS Attack Allows Hackers to Take Over Organization’s Subdomain

Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains,...